.png){kind=icon}
.png){kind=icon}
Return
Synchronizing DDoS detection and mitigation based graph learning with programmable data plane, SDN
.png){kind=icon}
PRE
AI
DOI：10.1016/j.future.2023.12.033.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The availability of SD-IoT is now under complex and serious cyber threats, especially distributed denialof-service attacks. However, traditional defense schemes suffer from coarse-grained centralized sampling approaches, low accuracy of detection models, and inefficient mitigation methods. In this paper, a novel DDoS defense scheme is proposed, which consists of a high-accuracy detection mechanism based on a Graph Convolutional Neural Network learning model and a mitigation mechanism based on fast traffic migration. In the detection stage, a fine-grained INT sampling approach is utilized to obtain multidimensional network topology and status information. The Graph Convolutional Neural Network learning model detects switches containing DDoS attack traffic with high accuracy because the detection model not only extracts and utilizes multiple temporal and spatial features of the collected information, but also has a better learning and representation capability. In the mitigation stage, the enhanced whitelist with dynamic threshold-based values is automatically adapted to the real -time state of the network environment for enhanced mitigation flexibility. The fast programmable segment rerouting strategy can block attack traffic in time and ensure the continuity of network services. The results of several comparison experiments show that the proposed scheme can detect DDoS attacks more accurately and mitigate them more effectively than traditional schemes.
Keywords:
Software defined network
Programmable data plane
Distributed denial of service
In-band network telemetry
Graph convolutional neural network
Journal
F
IF:
6.1
Papers:
6.8K
Citations:
2.3W